选择 automatic 引入的防火墙配置问题,默认规则里面有一行:
iptables -t nat -I PREROUTING -p tcp -m tcp --dport 1194 -j ACCEPT
使连接直接进入 ACCEPT 而跳过了 SHADOWSOCKS chain。
| [General] | |
| loglevel = warning | |
| bypass-system = true | |
| skip-proxy = 192.168.0.0/16,10.0.0.0/8,172.16.0.0/12,localhost,*.local,*.lan | |
| bypass-tun = 192.168.0.0/16,10.0.0.0/8,172.16.0.0/12 | |
| dns-server = 114.114.114.114,114.114.115.115 | |
| [Proxy] | |
| PROXY = custom,服务器地址,服务器端口,加密方式,密码,模块地址,tcp-fast-open=true |